$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: /0zarbe+LchMGvlPmBHO+l+Xd/y83FeNruDZbUAlxqo= Subject key identifier: DA:5E:40:09:E9:CA:A0:1B:3A:8E:CC:6E:DA:2B:B6:22:79:46:9D:EB Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 26E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 26B2 Signing time: Thu 24 Apr 2025 15:42:18 +0000 Manifest this update: Thu 24 Apr 2025 15:42:18 +0000 Manifest next update: Thu 01 May 2025 15:42:18 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: /dFUZmVmpF3+OCtsg+sMW4LR37rmSydg4ciF3slzsrE=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=) 3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: FuYmEvmcv/GUMD00P1zQM5lWXTNd1+nMlLmjGKSqeHM=) 4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: rxGK9ShGMruxcWfCnGcDXjtTVQToBCiiwGyhhjyHhAQ=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9953 (0x26e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: Apr 24 15:42:18 2025 GMT Not After : May 1 15:42:18 2025 GMT Subject: CN=680a5bda-7712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:25:6c:0c:94:07:cd:76:da:1e:16:0d:5a: 76:2f:f5:cb:dc:fe:c2:2a:90:ee:bf:7e:3e:13:f2: 6e:24:7e:39:ee:09:24:c8:c6:51:79:66:95:cc:d9: c6:46:1f:ca:aa:97:b9:2b:cc:b3:42:fb:ec:a5:3f: d6:7d:84:22:73:bb:cb:0b:29:06:ae:69:a9:6c:7f: 85:82:f7:2f:c3:e8:55:f6:c9:09:50:a5:5e:6c:41: 9a:ab:8d:19:45:38:21:5c:1e:2b:4b:6b:13:27:bc: 98:3a:6e:4b:78:87:1d:2b:63:45:00:5b:31:01:f0: e1:32:a0:91:6c:eb:88:49:5d:c4:9a:80:b4:69:10: 14:1f:8b:a9:e8:a1:f7:b5:43:28:c6:7a:ed:bc:9e: 11:b3:06:91:c9:1b:34:82:f0:d9:70:d7:ad:83:95: c6:61:1e:d7:50:58:3e:29:ba:0f:33:0f:74:7f:e3: bd:62:9b:bd:54:6d:fb:f5:ad:98:37:1a:2e:93:42: 92:99:b6:fe:b2:6e:2a:5b:96:fb:f4:e7:aa:1d:d5: 98:a5:cb:29:2a:c1:bd:4a:35:30:17:cf:ff:69:dd: 81:0e:63:23:55:f9:31:b7:e9:9e:2a:08:5a:fc:89: f7:90:7a:0c:51:a0:da:1b:eb:ba:ee:f8:12:b9:8a: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:40:09:E9:CA:A0:1B:3A:8E:CC:6E:DA:2B:B6:22:79:46:9D:EB X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f6:ca:63:9a:ee:be:83:39:a2:32:31:cc:fe:58:2d:00:3a: 5b:aa:fe:d2:73:53:4c:a4:08:3e:37:27:94:ae:19:b2:d9:a4: a7:e7:79:20:ab:c9:b6:7e:e5:aa:32:70:83:fe:99:ea:63:d5: 5b:6b:42:ef:d3:ac:a2:31:1e:d3:e4:8f:70:7f:45:4a:fc:97: b7:cf:bc:ef:6d:58:89:03:0f:d3:63:b3:f6:f5:ff:51:d1:28: 8e:52:18:6f:e9:4e:93:ae:84:50:fe:6c:72:98:17:eb:e0:cc: 2e:cd:5e:50:51:12:8b:3f:95:e7:4b:6e:e9:c6:37:09:d0:8c: 30:f4:da:dd:70:d5:b8:4d:b4:31:da:cb:99:69:45:4f:6a:0b: 18:15:da:ae:db:51:e6:05:87:3b:d5:0b:77:85:48:e3:0d:a6: f0:4c:2c:1a:ac:29:a6:85:0e:2a:d5:ea:71:7c:f1:39:f6:1c: e0:2a:52:3d:fb:b4:19:ce:a5:37:11:16:57:bb:8d:dc:bc:ae: 20:de:ba:c0:d8:11:7e:9b:45:42:30:90:dc:33:7a:17:bc:c4: 07:d0:a2:82:c8:59:ba:a2:44:48:5b:54:c1:3a:ce:ef:14:9b: 04:53:3d:db:c0:4b:de:82:b4:e6:66:87:48:ae:2a:95:c4:9c: ac:1e:f9:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjUwNDI0MTU0MjE4WhcNMjUwNTAxMTU0MjE4WjAYMRYwFAYD VQQDEw02ODBhNWJkYS03NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGQlbAyUB8122h4WDVp2L/XL3P7CKpDuv34+E/JuJH457gkkyMZReWaVzNnG Rh/Kqpe5K8yzQvvspT/WfYQic7vLCykGrmmpbH+Fgvcvw+hV9skJUKVebEGaq40Z RTghXB4rS2sTJ7yYOm5LeIcdK2NFAFsxAfDhMqCRbOuISV3EmoC0aRAUH4up6KH3 tUMoxnrtvJ4RswaRyRs0gvDZcNetg5XGYR7XUFg+KboPMw90f+O9Ypu9VG379a2Y Nxouk0KSmbb+sm4qW5b79OeqHdWYpcspKsG9SjUwF8//ad2BDmMjVfkxt+meKgha /In3kHoMUaDaG+u67vgSuYqMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpeQAnp yqAbOo7MbtortiJ5Rp3rMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm9spjmu6+gzmiMjHM/lgtADpbqv7Sc1NMpAg+NyeUrhmy2aSn53kg q8m2fuWqMnCD/pnqY9Vba0Lv06yiMR7T5I9wf0VK/Je3z7zvbViJAw/TY7P29f9R 0SiOUhhv6U6TroRQ/mxymBfr4MwuzV5QURKLP5XnS27pxjcJ0Iww9NrdcNW4TbQx 2suZaUVPagsYFdqu21HmBYc71Qt3hUjjDabwTCwarCmmhQ4q1epxfPE59hzgKlI9 +7QZzqU3ERZXu43cvK4g3rrA2BF+m0VCMJDcM3oXvMQH0KKCyFm6okRIW1TBOs7v FJsEUz3bwEvegrTmZodIriqVxJysHvnJ -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:13 2025 by rpki-client